Security : add "." to the blacklist : one could explore all the parent folders without this rule.